The implemented internal control system is designed to reduce risks to an acceptable level.
Non-conforming items are covered by corrective actions. Internal control results are regularly analyzed with operating teams, action plans are followed up.
Results (mapping, self-assessment, tests) are auditable by internal or external auditors.